Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/18cf0e57-5abb-3e67-857d-cf9ef06740e3.roa
File:                     18cf0e57-5abb-3e67-857d-cf9ef06740e3.roa (raw, json)
Hash identifier:          F//w7cN4C6Pdd02ZaiUpySADM9YSRs/kCVTk26AyD3Q=
Subject key identifier:   C5:2F:C7:3B:93:DC:89:AB:1B:8F:67:1E:F9:A9:6A:BC:B1:3F:25:EB
Certificate issuer:       /CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Certificate serial:       010D0C9F4328584F3FAD7C2218BA531A3AD84640
Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/18cf0e57-5abb-3e67-857d-cf9ef06740e3.roa
Signing time:             Mon 21 Sep 2026 13:00:12 +0000
ROA not before:           Mon 21 Sep 2026 13:00:12 +0000
ROA not after:            Sun 20 Dec 2026 14:00:12 +0000
asID:                     6167
IP address blocks:        2600:1004:a121::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 27 Sep 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:3f:ad:7c:22:18:ba:53:1a:3a:d8:46:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878
        Validity
            Not Before: Sep 21 13:00:12 2026 GMT
            Not After : Dec 20 14:00:12 2026 GMT
        Subject: CN=c5088736-8871-4cc7-9e12-062cfe5b020e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:80:82:55:40:25:08:ba:0a:b8:dd:bf:c6:62:04:
                    03:3b:db:5b:7a:8b:a0:f4:fa:9e:95:ab:bc:14:54:
                    ac:32:d0:67:df:3a:37:2d:9b:af:e9:0c:f4:28:ac:
                    42:d9:9d:b9:b1:1d:ff:51:76:e1:5b:92:f2:94:aa:
                    b5:ec:d8:28:09:97:35:90:84:a0:3a:2b:ac:8c:a1:
                    1a:7a:d6:0a:6f:79:f0:e4:96:9e:00:63:c2:2a:b1:
                    44:fa:f0:7d:48:b9:91:dd:df:b6:85:ef:69:09:19:
                    96:e6:a4:60:d9:41:a4:aa:6d:fb:ba:76:0a:3e:1c:
                    8a:a4:70:8f:67:46:4b:e1:95:9f:c4:bf:7a:88:65:
                    34:b3:a8:40:8e:4b:ae:6b:bd:6b:2b:12:1b:fe:54:
                    fd:48:2d:e6:0e:92:24:0b:4d:9e:7e:ac:ef:6a:02:
                    54:c4:32:01:78:df:a0:1e:81:a3:ba:c2:7f:a3:bb:
                    bd:e9:59:8c:aa:77:7b:1b:44:60:47:b7:94:fd:b4:
                    dd:d0:75:be:07:f6:d9:d3:bf:40:60:43:e5:bd:d7:
                    5a:d3:37:0b:d3:a6:29:96:d8:4e:bc:8d:cd:7a:00:
                    d2:1c:f0:14:aa:6e:9c:35:de:3e:e6:4f:de:de:09:
                    47:cd:fd:8c:ec:1d:1f:95:ef:db:b4:94:6a:c8:9e:
                    c4:f9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C5:2F:C7:3B:93:DC:89:AB:1B:8F:67:1E:F9:A9:6A:BC:B1:3F:25:EB
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/18cf0e57-5abb-3e67-857d-cf9ef06740e3.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl

            X509v3 Authority Key Identifier:
                keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:1004:a121::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         3b:9f:1c:e8:1a:29:cc:f2:28:aa:1d:1c:bc:b0:ef:50:e6:90:
         b5:25:da:d0:7a:a8:48:7d:8f:e5:bf:ba:94:b6:62:b7:da:13:
         bb:27:3b:fa:01:52:da:4a:73:ee:88:7c:4f:cc:39:95:9f:fe:
         ba:5f:2c:d1:8d:b2:93:41:ad:5b:a8:76:05:e6:51:16:2b:bb:
         9c:e4:e6:68:e3:5a:a5:3a:26:f1:20:e0:18:66:d6:80:b5:10:
         a8:27:0f:3d:f6:14:f3:21:22:0b:e3:0f:8f:56:73:d5:ba:36:
         9f:d6:6e:c7:d7:9f:f9:b5:a5:dc:7c:0b:f2:77:6d:ab:98:ec:
         fe:8b:9c:f7:16:98:5a:07:67:a5:dd:51:a7:42:6c:24:71:5c:
         dd:6c:92:ed:e2:e2:0b:a9:8a:68:b8:25:87:49:9b:16:9b:c4:
         ce:f3:cc:c4:70:b3:75:97:cf:9b:07:6f:38:71:eb:a0:72:81:
         00:1b:ea:37:aa:9d:03:f8:c7:a6:80:88:1b:52:27:0c:b6:d5:
         53:ab:90:94:12:eb:e5:b6:f0:c7:86:4b:ea:e4:44:64:a6:b1:
         4d:88:66:61:0b:20:c0:6a:a5:31:17:6a:e3:b6:7a:c5:74:1c:
         1d:d3:48:f7:60:c2:58:77:dc:ba:a1:94:0d:fd:18:6e:03:ea:
         7c:04:85:87
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 26 13:12:50 2026 by rpki-client